Does Order Matter : Connecting The Law of Robustness to Robust Generalization
Not on the map. Why?
Abstract (arXiv)
Bubeck and Selke (2021) propose the connection between the Law of Robustness and robust generalization error as an open problem. The Law of Robustness states that overparameterization is necessary for models to interpolate robustly, i.e., the interpolating function is required to be Lipschitz. Wu et al. (2023) extend this law to arbitrary data distributions, proving that the Lipschitz constant satisfies L = Omega(n1/d). Robust generalization, on the other hand, asks whether small robust training loss implies small robust test loss. This can be studied using statistical learning techniques such as Rademacher complexities, where a bound on the Rademacher complexity of the robust loss class implies a bound on the Lipschitzness of the function class. We use this connection to explicitly link the two for arbitrary data distributions. (i) We prove that the order of the Lipschitz bound remains the same when considering the global Rademacher complexity of robust loss classes. (ii) At the local scale, i.e., for subsets of functions with small empirical error, the order of the Lipschitz bound changes with the perturbation radius ρ and the localized concentration term √r/n.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 32 of its 40 references that are in the map. First posted on arXiv 24 Feb 2026.
Builds on
32 of 40 references.
References · 32
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2019Deep Double Descent: Where Bigger Models and More Data Hurtcited by 667
- 2019Adversarial Training for Free!cited by 638
- 2020Overfitting in adversarially robust deep learningcited by 504
- 2019Unlabeled Data Improves Adversarial Robustnesscited by 415
- 2018Lipschitz regularity of deep neural networks: analysis and efficient estimationcited by 413
- 2018Measuring the Intrinsic Dimension of Objective Landscapescited by 364
- 2018Adversarially Robust Generalization Requires More Datacited by 318
20 more
- 2019Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networkscited by 290
- 2017Parseval Networks: Improving Robustness to Adversarial Examplescited by 288
- 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 193
- 2018Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approachcited by 181
- 2021A Universal Law of Robustness via Isoperimetrycited by 150
- 2018Rademacher Complexity for Adversarially Robust Generalizationcited by 132
- 2019Adversarially Robust Generalization Just Requires More Unlabeled Datacited by 75
- 2020A law of robustness for two-layers neural networkscited by 54
- 2022Understanding Robust Overfitting of Adversarial Training and Beyondcited by 50
- 2022Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspectivecited by 48
- 2023Deep neural networks have an inbuilt Occam's razorcited by 28
- 2022Why Robust Generalization in Deep Learning is Difficult: Perspective of Expressive Powercited by 23
- 2015Local Rademacher Complexity Bounds based on Covering Numberscited by 10
- 2022A Law of Robustness beyond Isoperimetrycited by 9
- 2023The Lipschitz-Variance-Margin Tradeoff for Enhanced Randomized Smoothingcited by 6
- 2023On the Clean Generalization and Robust Overfitting in Adversarial Training from Two Theoretical Views: Representation Complexity and Training Dynamicscited by 5
- 2024Stability and Generalization in Free Adversarial Trainingcited by 5
- 2024A direct proof of a unified law of robustness for Bregman divergence lossescited by 4
- 2023Generating Less Certain Adversarial Examples Improves Robust Generalizationcited by 3
- 2021A Law of Robustness for Weight-bounded Neural Networkscited by 2
Built on by
Citing papers per year: 2026: 1.
1 paper.
- 2026Adversarially Robust PAC Learning with Optimal VC Ratescited by 0
- 2026Adversarially Robust PAC Learning with Optimal VC Rates21 Sep 2026